State data breach laws continue to evolve/diverge

While data privacy and compliance professionals clamor for a single, Federal data breach notification statute, states have continued to establish and amend their own medley of breach notification statutes.

There is, however, some commonality among the state data breach laws. Generally, the laws address the following issues related to data breach notification.

A good, conservative approach when trying to comply to a multitude of statutory frameworks is to model the response to comply with the most restrictive and onerous of the state laws.